We had private functions in our code suddenly get requested by bingbot traffic…. Had to be from copilot/openai.
We saw an influx of 404 for these invalid endpoints, and they match private function names that weren’t magically guessed..
We saw an influx of 404 for these invalid endpoints, and they match private function names that weren’t magically guessed..
Are they in your sitemap? robots.txt? Listed in JS or something else someone scraped?
They’re some helper functions, python, in controller files. And bing started trying to invoke them as http endpoints.